Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323335353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a323335353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ER5BoQ/VGSExXwXwZvJKmCufSwPmT+5gmwAS0emWkaA=
Subject key identifier:   B8:B6:76:F7:09:DF:38:C7:6D:BB:3C:81:DC:4E:46:7A:3C:70:D2:A0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       273591C042DC867054436BA633A0B479AD2B8659
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323335353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 23:55:39 +0000
ROA not before:           Sat 19 Feb 2022 23:50:39 +0000
ROA not after:            Sat 18 Feb 2023 23:55:39 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:2355::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:35:91:c0:42:dc:86:70:54:43:6b:a6:33:a0:b4:79:ad:2b:86:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 23:50:39 2022 GMT
            Not After : Feb 18 23:55:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:e7:6f:a2:f0:cc:aa:60:d5:0c:6b:da:4b:
                    2e:37:fc:a6:2e:02:36:30:3a:0b:1b:75:70:3b:ca:
                    11:56:0f:b6:f8:87:51:48:c4:47:57:a0:8c:62:84:
                    af:63:d0:25:81:67:9d:f2:ce:e9:00:ce:10:00:05:
                    7b:98:1a:29:bc:7d:47:76:7d:01:8b:40:33:73:6b:
                    c7:e0:ab:b6:67:1a:8d:77:1c:0e:a6:14:ae:c7:08:
                    49:a1:7b:e7:03:dd:e0:c8:62:0a:f2:c6:72:6c:3c:
                    bc:7e:06:d1:5e:83:c7:5d:b2:41:f6:2f:0a:4b:b9:
                    9e:a1:69:a3:99:c8:25:2d:28:2a:d0:e8:e2:7e:32:
                    05:87:ea:68:eb:51:c1:e7:9e:66:9c:aa:e2:f4:d7:
                    39:2c:0f:e3:01:e3:70:ee:cb:aa:e5:90:f6:4d:d0:
                    6c:68:18:6e:37:10:f9:b8:84:12:1b:a3:60:ab:a9:
                    57:d4:63:00:0b:3b:52:2d:bc:bd:02:0c:1d:a3:a7:
                    35:4e:0c:8b:37:d8:8b:30:34:70:64:b0:b6:64:40:
                    32:16:8d:ac:b4:cf:7a:e8:e4:2c:36:8a:57:39:b8:
                    24:e1:2a:7a:79:b0:00:d5:62:6f:77:d9:96:15:74:
                    88:3c:bc:e8:80:31:95:a8:73:a2:fd:fc:5f:47:6b:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B6:76:F7:09:DF:38:C7:6D:BB:3C:81:DC:4E:46:7A:3C:70:D2:A0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323335353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:2355::/80

    Signature Algorithm: sha256WithRSAEncryption
         7d:64:32:00:48:7b:ea:69:8d:b2:fd:be:7f:64:1a:d9:f4:b0:
         4d:21:fc:c3:a6:5e:c1:38:d0:cf:67:bc:b1:f9:37:23:11:c3:
         d2:5b:06:ea:0a:b2:eb:f5:d2:9a:7b:e3:1b:bd:14:f3:5a:8a:
         b5:39:90:0d:3f:43:62:f4:b8:b6:7a:c7:e1:88:d0:4d:5a:82:
         3a:45:fb:22:f9:17:3d:53:0f:18:51:56:3b:4f:03:95:41:91:
         0d:32:6d:6d:6f:d5:22:02:4f:c2:b1:3f:93:a6:e4:b2:88:9f:
         72:41:90:53:53:b8:86:2e:c8:6d:b3:22:ad:3b:42:b8:85:b8:
         d9:d3:bc:22:93:45:bd:10:66:2c:c8:a8:c1:8e:8f:4f:d4:42:
         1f:80:af:a8:0c:17:6f:04:1f:e8:6f:63:63:dc:a5:1b:39:0d:
         02:ae:3f:84:39:26:c4:60:ee:a7:a5:d7:b9:fa:52:3f:20:d8:
         dd:cf:b3:fd:99:8b:15:27:b7:7e:0e:84:dd:94:1c:27:1b:bf:
         bc:f8:e1:ce:16:ea:f6:28:4f:7f:9e:61:0d:17:b1:49:cb:45:
         2e:ac:41:1f:58:56:da:b0:3d:3b:8b:fd:09:1d:fb:7f:75:15:
         fd:de:1a:09:1c:2f:d9:7e:fd:72:ee:a7:37:d8:93:20:37:24:
         5e:7b:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----